Browse Source
wireguard: drop wireguard
WireGuard was added to LEDE core. See discussion at lede-project/source#1409 Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>lilik-openwrt-22.03
Kevin Darbyshire-Bryant
7 years ago
2 changed files with 0 additions and 308 deletions
Split View
Diff Options
-
+0 -116net/wireguard/Makefile
-
+0 -192net/wireguard/files/wireguard.sh
+ 0
- 116
net/wireguard/Makefile
View File
| @ -1,116 +0,0 @@ | |||
| # | |||
| # Copyright (C) 2016-2017 Jason A. Donenfeld <Jason@zx2c4.com> | |||
| # Copyright (C) 2016 Baptiste Jonglez <openwrt@bitsofnetworks.org> | |||
| # Copyright (C) 2016-2017 Dan Luedtke <mail@danrl.com> | |||
| # | |||
| # This is free software, licensed under the GNU General Public License v2. | |||
| # See /LICENSE for more information. | |||
| include $(TOPDIR)/rules.mk | |||
| include $(INCLUDE_DIR)/kernel.mk | |||
| PKG_NAME:=wireguard | |||
| PKG_VERSION:=0.0.20171005 | |||
| PKG_RELEASE:=1 | |||
| PKG_SOURCE:=WireGuard-$(PKG_VERSION).tar.xz | |||
| PKG_SOURCE_URL:=https://git.zx2c4.com/WireGuard/snapshot/ | |||
| PKG_HASH:=832a3b7cbb510f6986fd0c3a6b2d86bc75fc9f23b6754d8f46bc58ea8e02d608 | |||
| PKG_LICENSE:=GPL-2.0 | |||
| PKG_LICENSE_FILES:=COPYING | |||
| PKG_BUILD_DIR:=$(BUILD_DIR)/WireGuard-$(PKG_VERSION) | |||
| PKG_BUILD_PARALLEL:=1 | |||
| PKG_USE_MIPS16:=0 | |||
| # Wireguard's makefile needs this to know where to build the kernel module | |||
| export KERNELDIR:=$(LINUX_DIR) | |||
| include $(INCLUDE_DIR)/package.mk | |||
| define Package/wireguard/Default | |||
| SECTION:=net | |||
| CATEGORY:=Network | |||
| SUBMENU:=VPN | |||
| URL:=https://www.wireguard.com | |||
| MAINTAINER:=Baptiste Jonglez <openwrt@bitsofnetworks.org>, \ | |||
| Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>, \ | |||
| Dan Luedtke <mail@danrl.com>, \ | |||
| Jason A. Donenfeld <Jason@zx2c4.com> | |||
| endef | |||
| define Package/wireguard/Default/description | |||
| WireGuard is a novel VPN that runs inside the Linux Kernel and utilizes | |||
| state-of-the-art cryptography. It aims to be faster, simpler, leaner, and | |||
| more useful than IPSec, while avoiding the massive headache. It intends to | |||
| be considerably more performant than OpenVPN. WireGuard is designed as a | |||
| general purpose VPN for running on embedded interfaces and super computers | |||
| alike, fit for many different circumstances. It uses UDP. | |||
| endef | |||
| define Package/wireguard | |||
| $(call Package/wireguard/Default) | |||
| TITLE:=Wireguard meta-package | |||
| DEPENDS:=+wireguard-tools +kmod-wireguard | |||
| endef | |||
| include $(INCLUDE_DIR)/kernel-defaults.mk | |||
| include $(INCLUDE_DIR)/package-defaults.mk | |||
| # Used by Build/Compile/Default | |||
| MAKE_PATH:=src/tools | |||
| define Build/Compile | |||
| $(MAKE) $(KERNEL_MAKEOPTS) M="$(PKG_BUILD_DIR)/src" modules | |||
| $(call Build/Compile/Default) | |||
| endef | |||
| define Package/wireguard/install | |||
| true | |||
| endef | |||
| define Package/wireguard/description | |||
| $(call Package/wireguard/Default/description) | |||
| endef | |||
| define Package/wireguard-tools | |||
| $(call Package/wireguard/Default) | |||
| TITLE:=Wireguard userspace control program (wg) | |||
| DEPENDS:=+libmnl | |||
| endef | |||
| define Package/wireguard-tools/description | |||
| $(call Package/wireguard/Default/description) | |||
| This package provides the userspace control program for wireguard, `wg`, | |||
| and a netifd protocol helper. | |||
| endef | |||
| define Package/wireguard-tools/install | |||
| $(INSTALL_DIR) $(1)/usr/bin/ | |||
| $(INSTALL_BIN) $(PKG_BUILD_DIR)/src/tools/wg $(1)/usr/bin/ | |||
| $(INSTALL_DIR) $(1)/lib/netifd/proto/ | |||
| $(INSTALL_BIN) ./files/wireguard.sh $(1)/lib/netifd/proto/ | |||
| endef | |||
| define KernelPackage/wireguard | |||
| SECTION:=kernel | |||
| CATEGORY:=Kernel modules | |||
| SUBMENU:=Network Support | |||
| TITLE:=Wireguard kernel module | |||
| DEPENDS:=+IPV6:kmod-udptunnel6 +kmod-udptunnel4 | |||
| FILES:= $(PKG_BUILD_DIR)/src/wireguard.$(LINUX_KMOD_SUFFIX) | |||
| AUTOLOAD:=$(call AutoProbe,wireguard) | |||
| endef | |||
| define KernelPackage/wireguard/description | |||
| $(call Package/wireguard/Default/description) | |||
| This package provides the kernel module for wireguard. | |||
| endef | |||
| $(eval $(call BuildPackage,wireguard)) | |||
| $(eval $(call BuildPackage,wireguard-tools)) | |||
| $(eval $(call KernelPackage,wireguard)) | |||
+ 0
- 192
net/wireguard/files/wireguard.sh
View File
| @ -1,192 +0,0 @@ | |||
| #!/bin/sh | |||
| # Copyright 2016-2017 Dan Luedtke <mail@danrl.com> | |||
| # Licensed to the public under the Apache License 2.0. | |||
| WG=/usr/bin/wg | |||
| if [ ! -x $WG ]; then | |||
| logger -t "wireguard" "error: missing wireguard-tools (${WG})" | |||
| exit 0 | |||
| fi | |||
| [ -n "$INCLUDE_ONLY" ] || { | |||
| . /lib/functions.sh | |||
| . ../netifd-proto.sh | |||
| init_proto "$@" | |||
| } | |||
| proto_wireguard_init_config() { | |||
| proto_config_add_string "private_key" | |||
| proto_config_add_int "listen_port" | |||
| proto_config_add_int "mtu" | |||
| proto_config_add_string "fwmark" | |||
| available=1 | |||
| no_proto_task=1 | |||
| } | |||
| proto_wireguard_setup_peer() { | |||
| local peer_config="$1" | |||
| local public_key | |||
| local preshared_key | |||
| local allowed_ips | |||
| local route_allowed_ips | |||
| local endpoint_host | |||
| local endpoint_port | |||
| local persistent_keepalive | |||
| config_get public_key "${peer_config}" "public_key" | |||
| config_get preshared_key "${peer_config}" "preshared_key" | |||
| config_get allowed_ips "${peer_config}" "allowed_ips" | |||
| config_get_bool route_allowed_ips "${peer_config}" "route_allowed_ips" 0 | |||
| config_get endpoint_host "${peer_config}" "endpoint_host" | |||
| config_get endpoint_port "${peer_config}" "endpoint_port" | |||
| config_get persistent_keepalive "${peer_config}" "persistent_keepalive" | |||
| # peer configuration | |||
| echo "[Peer]" >> "${wg_cfg}" | |||
| echo "PublicKey=${public_key}" >> "${wg_cfg}" | |||
| if [ "${preshared_key}" ]; then | |||
| echo "PresharedKey=${preshared_key}" >> "${wg_cfg}" | |||
| fi | |||
| for allowed_ip in $allowed_ips; do | |||
| echo "AllowedIPs=${allowed_ip}" >> "${wg_cfg}" | |||
| done | |||
| if [ "${endpoint_host}" ]; then | |||
| case "${endpoint_host}" in | |||
| *:*) | |||
| endpoint="[${endpoint_host}]" | |||
| ;; | |||
| *) | |||
| endpoint="${endpoint_host}" | |||
| ;; | |||
| esac | |||
| if [ "${endpoint_port}" ]; then | |||
| endpoint="${endpoint}:${endpoint_port}" | |||
| else | |||
| endpoint="${endpoint}:51820" | |||
| fi | |||
| echo "Endpoint=${endpoint}" >> "${wg_cfg}" | |||
| fi | |||
| if [ "${persistent_keepalive}" ]; then | |||
| echo "PersistentKeepalive=${persistent_keepalive}" >> "${wg_cfg}" | |||
| fi | |||
| # add routes for allowed ips | |||
| if [ ${route_allowed_ips} -ne 0 ]; then | |||
| for allowed_ip in ${allowed_ips}; do | |||
| case "${allowed_ip}" in | |||
| *:*/*) | |||
| proto_add_ipv6_route "${allowed_ip%%/*}" "${allowed_ip##*/}" | |||
| ;; | |||
| *.*/*) | |||
| proto_add_ipv4_route "${allowed_ip%%/*}" "${allowed_ip##*/}" | |||
| ;; | |||
| *:*) | |||
| proto_add_ipv6_route "${allowed_ip%%/*}" "128" | |||
| ;; | |||
| *.*) | |||
| proto_add_ipv4_route "${allowed_ip%%/*}" "32" | |||
| ;; | |||
| esac | |||
| done | |||
| fi | |||
| } | |||
| proto_wireguard_setup() { | |||
| local config="$1" | |||
| local wg_dir="/tmp/wireguard" | |||
| local wg_cfg="${wg_dir}/${config}" | |||
| local private_key | |||
| local listen_port | |||
| local mtu | |||
| # load configuration | |||
| config_load network | |||
| config_get private_key "${config}" "private_key" | |||
| config_get listen_port "${config}" "listen_port" | |||
| config_get addresses "${config}" "addresses" | |||
| config_get mtu "${config}" "mtu" | |||
| config_get fwmark "${config}" "fwmark" | |||
| # create interface | |||
| ip link del dev "${config}" 2>/dev/null | |||
| ip link add dev "${config}" type wireguard | |||
| if [ "${mtu}" ]; then | |||
| ip link set mtu "${mtu}" dev "${config}" | |||
| fi | |||
| proto_init_update "${config}" 1 | |||
| # generate configuration file | |||
| umask 077 | |||
| mkdir -p "${wg_dir}" | |||
| echo "[Interface]" > "${wg_cfg}" | |||
| echo "PrivateKey=${private_key}" >> "${wg_cfg}" | |||
| if [ "${listen_port}" ]; then | |||
| echo "ListenPort=${listen_port}" >> "${wg_cfg}" | |||
| fi | |||
| if [ "${fwmark}" ]; then | |||
| echo "FwMark=${fwmark}" >> "${wg_cfg}" | |||
| fi | |||
| config_foreach proto_wireguard_setup_peer "wireguard_${config}" | |||
| # apply configuration file | |||
| ${WG} setconf ${config} "${wg_cfg}" | |||
| WG_RETURN=$? | |||
| # delete configuration file | |||
| rm -f "${wg_cfg}" | |||
| # check status | |||
| if [ ${WG_RETURN} -ne 0 ]; then | |||
| sleep 5 | |||
| proto_setup_failed "${config}" | |||
| exit 1 | |||
| fi | |||
| # add ip addresses | |||
| for address in ${addresses}; do | |||
| case "${address}" in | |||
| *:*/*) | |||
| proto_add_ipv6_address "${address%%/*}" "${address##*/}" | |||
| ;; | |||
| *.*/*) | |||
| proto_add_ipv4_address "${address%%/*}" "${address##*/}" | |||
| ;; | |||
| *:*) | |||
| proto_add_ipv6_address "${address%%/*}" "128" | |||
| ;; | |||
| *.*) | |||
| proto_add_ipv4_address "${address%%/*}" "32" | |||
| ;; | |||
| esac | |||
| done | |||
| # endpoint dependency | |||
| wg show "${config}" endpoints | \ | |||
| sed -E 's/\[?([0-9.:a-f]+)\]?:([0-9]+)/\1 \2/' | \ | |||
| while IFS=$'\t ' read -r key address port; do | |||
| [ -n "${port}" ] || continue | |||
| proto_add_host_dependency "${config}" "${address}" | |||
| done | |||
| proto_send_update "${config}" | |||
| } | |||
| proto_wireguard_teardown() { | |||
| local config="$1" | |||
| ip link del dev "${config}" >/dev/null 2>&1 | |||
| } | |||
| [ -n "$INCLUDE_ONLY" ] || { | |||
| add_protocol wireguard | |||
| } | |||